io.gravitee.apim:gravitee-api-management (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package io.gravitee.apim:gravitee-api-management, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2022-38723 — CVSS 8.6 (high): Gravitee API Management before 3.15.13 allows path traversal through HTML injection.
• CVE-2019-25075 — CVSS 6.1 (medium): HTML injection combined with path traversal in the Email service in Gravitee API Management before 1.25.3 allows anonymous users to read…